JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.166.236

104.28.166.236 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.166.236

Whois 104.28.166.236

IP Abuse Reports for 104.28.166.236:

This IP address has been reported a total of 99 times from 50 distinct sources. 104.28.166.236 was first reported on July 1st 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 arnisolutions	2026-08-19 12:04:43 (6 days ago)	Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ... show more Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 6 day(s) between 2026-08-14 and 2026-08-18 (UTC). 1 further address(es) from the same network showed abusive behaviour. show less	Web App Attack Hacking
🇩🇪 Marc	2026-08-19 00:32:32 (6 days ago)	104.28.166.236 - - [19/Aug/2026:02:32:31 +0200] "GET /application.yml HTTP/2.0" 404 291 "-" "Mozilla ... show more 104.28.166.236 - - [19/Aug/2026:02:32:31 +0200] "GET /application.yml HTTP/2.0" 404 291 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" 104.28.166.236 - - [19/Aug/2026:02:32:31 +0200] "GET /.env.dev HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" 104.28.166.236 - - [19/Aug/2026:02:32:31 +0200] "GET /public/.env HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" show less	Brute-Force
🇵🇱 dzpk	2026-08-17 12:46:18 (1 week ago)	104.28.166.236 - - [17/Aug/2026:14:46:17 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 App ... show more 104.28.166.236 - - [17/Aug/2026:14:46:17 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" show less	Bad Web Bot Web App Attack
🇵🇱 dzpk	2026-08-17 12:21:21 (1 week ago)	[17/Aug/2026:14:21:20 +0200] 178696928051.358086 104.28.166.236 43251 HOST 443 [17/Aug/2026:14:21:21 ... show more [17/Aug/2026:14:21:20 +0200] 178696928051.358086 104.28.166.236 43251 HOST 443 [17/Aug/2026:14:21:21 +0200] 178696928163.780653 104.28.166.236 43251 HOST 443 [17/Aug/2026:14:21:21 +0200] 178696928119.225719 104.28.166.236 43251 HOST 443 show less	Web App Attack
🇫🇷 Little Iguana	2026-08-15 20:17:58 (1 week ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇩🇪 FeG Deutschland	2026-08-15 17:26:53 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇩🇪 pigro	2026-08-15 10:19:54 (1 week ago)	104.28.166.236 - - [15/Aug/2026:12:19:54 +0200] "GET /api/.env HTTP/2.0" 301 0 "-" "Mozilla/5.0 (com ... show more 104.28.166.236 - - [15/Aug/2026:12:19:54 +0200] "GET /api/.env HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" ... show less	Web App Attack
🇩🇪 pigro	2026-08-15 02:11:17 (1 week ago)	104.28.166.236 - - [15/Aug/2026:04:11:17 +0200] "GET /api/.env HTTP/2.0" 301 0 "-" "Mozilla/5.0 (com ... show more 104.28.166.236 - - [15/Aug/2026:04:11:17 +0200] "GET /api/.env HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" ... show less	Web App Attack
🇩🇪 pigro	2026-08-15 00:53:33 (1 week ago)	104.28.166.236 - - [15/Aug/2026:02:53:32 +0200] "GET /api/.env HTTP/2.0" 301 0 "-" "Mozilla/5.0 (com ... show more 104.28.166.236 - - [15/Aug/2026:02:53:32 +0200] "GET /api/.env HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected])" 104.28.166.236 - - [15/Aug/2026:02:53:33 +0200] "GET /api/.env/ HTTP/2.0" 404 2285 "https://pigro.site/api/.env" "Mozilla/5.0 (compatible; Bytespider; [email protected])" ... show less	Web App Attack
🇵🇱 dzpk	2026-08-14 21:07:36 (1 week ago)	[14/Aug/2026:23:07:36 +0200] 178674165625.250361 104.28.166.236 46220 HOST 443 [14/Aug/2026:23:07:36 ... show more [14/Aug/2026:23:07:36 +0200] 178674165625.250361 104.28.166.236 46220 HOST 443 [14/Aug/2026:23:07:36 +0200] 178674165678.021043 104.28.166.236 46220 HOST 443 [14/Aug/2026:23:07:36 +0200] 178674165615.308907 104.28.166.236 46220 HOST 443 show less	Web App Attack
🇬🇧 consul.to	2026-08-13 01:05:03 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Bedios GmbH	2026-08-12 06:46:24 (1 week ago)	Login credentials theft attempt	Hacking
🇸🇪 SkyDancer	2026-08-11 02:58:32 (2 weeks ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇩🇪 FeG Deutschland	2026-08-10 19:00:12 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇫🇮 6kilowatti	2026-08-10 02:13:26 (2 weeks ago)	104.28.166.236 - - [10/Aug/2026:02:13:24 +0000] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 122 ... show more 104.28.166.236 - - [10/Aug/2026:02:13:24 +0000] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 122 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" ... show less	Web App Attack

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.72.76.203

🇫🇷 2001:41d0:33d:9200::40c

🇺🇸 205.210.31.48

🇺🇸 205.210.31.31

🇯🇵 172.64.213.42

🇯🇵 113.158.205.225

🇮🇩 103.191.14.210

🇲🇦 81.192.46.29

🇵🇪 38.253.151.170

🇺🇸 23.234.114.223

🇩🇪 2.26.53.142

🇱🇹 213.176.26.122

🇻🇳 123.16.143.216

🇧🇩 103.4.145.50

🇳🇱 91.92.40.124

🇺🇸 2607:f8b0:4001:c13::12e

🇯🇵 212.87.194.103

🇹🇼 198.235.24.106

🇷🇴 80.94.92.234

🇺🇸 198.199.91.73